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^^^^ 

RSAX^^:^:fl^^i>pk.^n^^)i^^^4^'^'\^, 512 l^b#^ij 
1024 J=b#5iJ 2048 tb#, ^■ft4^6^^ltit-^, ^^f'^k.^^^^^mfM 

ti^ 2000 ^^n^:^KiHyoung KO. Sang Jin Lee ^ CRYPTO 2000 

H. Ko, S. J. Lee, J. H. Cheon , J. W. Han, J. S. Kang and C. S. Park, New 
Public-Key Crytosystem Using Braid Groups, Proc. of Crypto 2000, LNCS 
1880. Springer-Verlag (2000) 166 183. ), ^^>5H^ W'i^Mm^] T t ^i>(j^ 

^fij'&6^^^^;&'f*^#J-i)S:^-4^^W6^)i^<fe^^. iLfij2003-^, # 
SI Ki Hyoung KO. Doo Ho Cho ^ A #^I?L T ^^l^-f fW^4l.R^6^ 

#.^J ( Ki Hyoung Ko and Doo Ho Choi and Mi Sung Cho and Jang Won Lee 
New Signature Scheme Using Conjugacy Problem Cryptology ePrint Archive: 
Complete Contents 2003/1 68)^^4^^^^ "i^M (SCSS)^^^^¥^^J^^P\ 

(CSS), ^-fn n scss vj^^ CSS ^n^^^ . 

n^^^^^^\SCSS: 
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: >it-f — ^^^6^ $ ^ 4 M, M sign(M)=a-'ya , ^ 1 1% 

t4^i^: /ii-l^: -A-CSPi^M.^m^MM.^-^M ix, x' ) eB„^B„, 
a€B„, )^Ax'=fl-'xa; 

(a, P, Y). 

mt: M 6^-^;^ Jigwr^= (a, P, y):?^'^**^^ ^iL>(5l^^^A: 

a ~ X, P ~ Y ~ y, a P ~ xy, a Y ~ X, y. 
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W&^^^bf^'M 4-M^;& ^Si\Sign(M) =d'byb-'a\ 

:^t. Pf\^^m^S^^i>^^7t^ix', x)A^^^7ta^^M^t^^VXy-^ 

#45^ lb. #^/tx^TFi{;#>|^iCx=A"7T,7T2 ... 71/; 

#^le. P^L^t^/'^— ^tb^, io^f^l, if^x' =f/ecvc/i«^(3c), a= a 7r,5 ??J<!'J, 
i\%x'=cycling(x'), a= a rY ;r/;; 

fJri^-^rm. 2 ^M^^^l&U. h #5'J y=h(Ad) 6 B„(l)^t>tS^it^^^^VMy'^ 

'\^H(M)-'^^^^ l^R,\\R2\\ - \\Ri, 
M h(M), 

fm Is^SmsL:^ vmt^J^:^ S^i^^^t,t'MyJs;SLM^^:^ Sign(M) 
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:^^*4fe, nsign(M)Z-Ar'^'^'^^^. ^k.^\ M sign(M) 

'^n:^sign(M)x' ^ xy BCDA, 

^^T^Sik^^^m^^LBjl), x' €5„(/). a6 5„(/), ^m^^n 
=a'xa, JL^^x^x' ^mia^if^XA^-^^m, ^##fit^(x', 

^ V\ 

#^5>^;g^^ Vi^iK^X^S^^^^^M^X^M^!^^ Sign(M) 
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fm. 8. S ^^^^if^ sign(M) x' ^ xy, i^^^^^A^^ 

b, ^t#4W-^>h>-^'4M, J^^(sign(M), h(M)) 

t SCSS ^J^^m^—^m^^ a ^^^im{sign(M)> h(M))¥)4k¥.^^ 
k'CSP ;i^^m^^^^^^M ECSS l^^A^n^:^'^-^^^^^ 

CSS ^^¥j^AAJ^X-f^^f^^^'\^^^J^^ A!yi$-_-^^^^^^^ 



^ 1 













SCSS 


4^^it#: life 






krCSP ^M., 4£r 

Mcsp nM. 


CSS 








■f.iS^ikl k-CSPt^ 
M., &.i-MTSPf^m. 


ii:iECSS) 




life. 
2Jfc 


1 >h^>t. 


•f, 0-)k7 k-CSPm 
M, MCSP R 
M. 
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T^^-^^#. ;^^^^l^'^^^(^CSS^J^:^-}k^Pentium UI 866MHz^ 
r=3): 



4L2 



n 






^^^^ 








20 


370 


1653 


17.82 ms 


18.68 ms 


30.87 ms 


2220 


24 


478 


2138 


21.70 ms 


22.79 ms 


41.75 ms 


2356 


28 


591 


2648 


24.42 ms 


25.77 ms 


59.59 ms 


2530 



® 5 CDP nM^n^^^BCDA ^^vj^@; 

T: 

ajaj = CjOi (|i-7l>l, l<i,7<«) (D 
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QiOiOi= a-jOi Oi (h-y|>l. KU j<n) (2) 

mBn.i^. lij^^/t^^ (l)^^T^: ^^(x,y)^LB„,^RB„.j.„> txy=yx, 
^^^"^f^^b, ^^y^^'toi, 02 a„.ijfi7;?^^a,, 02 CT„., 

J?'J#a^ft6^-^->t. ^iLA=(a, a2-.. a„.,)(aia2.- a„.2)- (aia2)(ai)# 
A^1^B„if}^ftj. Am^Ab'=r(b)A, rCcri)= a^^^. A /t##X^ 

^X^TT :{0, 1, ... > n-1} - {0, 1, .... n-l}^4^o 'fi^'^ 
— ^— 4"#>^^-^^^: b= A"7r,7r2 TT,, ^t^ii^ 
— >hJ.^;^t. fr^^v'L^'^vl^^d^T: inf(b) = u, st^(b)=u+l , 1(b) =L 
B^^, 'tfs'M^^A-^Tt X, y €B„. ^^—^^yt a €Bn 

^my^a'xa, ^m^^x, y-^^, i^^x~y, ^^^a^^^¥.^ ix, y) 

~ y), m^]-^¥^7taeB„. ^my^a'^xa, ^^^^^^il, 9 It 

1^^. MCSP i^M ( ES5*4€. 

f°l« CSP ® ^/fiW MCSP \'S\M.^^i>^m^'!iPT: 

6^: (;c, X-) eB„^B„, ^-^^^y^Bn 

i^M: 4^S'J— ^BnMA^: y " y' xy ~ x' y 
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,Bn^!k^nj^0\02 a„.„^^^L5„>f>^^ita, ,<7 2 a 

^yj:^^—^ CSP HM-^M^^M.^^^^ ix, X') ^LB^^Bn> 
a €B„, i^j^x' -a''xa\ 

^^tM M h i\%m^ y=h(M), PBG 1^^^ 

t^^y^ (x, x), ^y=h(M). -^Mit^^^ sign(A^m^sign(M) ~y. x' 
sign(M)~xy, M^^^iiti-^^k MCSP \^M., iiJjtbA^^&^*^:S'J6^. 

^b, ^VMf^-f^ii^^k-CSPl^M., mtk-CSP\^M.^'^-i>py: 

6^: k^-^¥^{x,,x,-\ , Uk>Xk) ^B„xBn3.x{ =a'xia(i=l- k}, 

mU €B„, ^^^-xi =b-'xib 6=7, 2 kX 

^JJC'ftfe.fi^super s\mamt^SSS(x)={ys BnO)\ y "x, mf(y)^ Maxmf(x), 
sup(y)=Mrunip(x)},^A-^S^ik^^^iSi^MSSS(x)\,^i^\^^j ,^y ~ 

X , ^ 5C ;c , 7 fal 6^ jE& i^Cx , y)=min{l(b)\y= b-'ab } , ^ >^ # ^ :>C 
5(*.<0 = {>'€'SSS(x)|rf(x,>')^d}. j^^'effCA:, M-^M ix', x) ¥fCSPt^M 

%'^RSSBG(x, d)=(x, d)mxW^f^x^s(x, d)M.x=a'xa, ^^i^#^'J^4^ 
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■^^14. if^x'=b-'xb,a=b; 
i\%x'=cycling(x), a=a T''(7rj)', 

fmio.^sms-:^ v^^^^^ s^ii^m:^^Mv^^M^^J^ sign(M) 

f'j¥}-'^^m g^det(0(g) -I), *tg€ B„(l ), 0{g)^gmwau^^> 1 
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^^^m, det0^s^m^\m^^^ ^mit^^AB„(l)^^^^. ^et(0(g) 
B^X^^^,m^d(P^t)) < l(n-l)n/2. m^^^^a, be B„(l ) A. 

^Pa(ti}-Pb(th J'J^sbl. mm^Q^ ^'S-d(Pa(t)-Pt(t)) ^ l(n-l)n/2, 
^^,(t)- Pb(t) '-0§L^r.tl(n-l)n/2A-^. Pf\^X^^Pr[Pa(t)^ Pb(t)\^^^^ 



Maxinf-MinsupmiK, ^t^^^x eB„(l ) > ^^Maxinf(x) - Max{mf(y)\ 
y - X, y^BnO )}> Minsup (x ) =Mm{sup(y)\y ~ x. y ^Bn(l)) . ^ 
Maxinf-MmsupmTK> ^f^^^a, b 6 B„(l).n^Maxmf(a)= Maxmf(b)> Minsup 
(a) =Mmsup (b)^^^^SL. fji^ihl, ^-JSmiiJO. T^^ 

m%Maxinf(x)^Minsup (x)^%^^^, t'k.XX^^^'^^ ^x=A»7Ti 
712 -TT, , cycling (x)=(T^(7r,))-'xT''(ni). decycling(x) =n,-^xni, ^y. 
m^>^cycling (decyclingJ^^, i|iJi«/M;ip (5«jHJL<^^' )> 

m^t^M^-^> ^t.im%m. 3.m^>'^m\^-tm^%-M\ ^^^^ 

t,m\^XHm=n(n-l)/2^inf^Z-^^ii^ {sup^Z-^A*}" )> M'^-^^^t^ 
infW^Maxinf(x){^M Minsup(x), J- S. 

Birman, K H. Ko andS. J. Lee, Thein.mum, supremum and geodesic length 
of a braid conjugacy class , to appear in Advances in Mathematics. , 
^X^^^0( fnlogn), 

■itP^^Tta, fritit T 3i.^^ k.MT^^Maxinf-MinsupmT^, M T ^'J^a ~ 
r^^^-^Wl-'^^^^ ^?a~b'', i^.Hnit^'f-n.M'it^^a . b^i)L, A 

K. H. Ko, S. J. Lee, J. H. Cheon, J. W. Han, J. S. Kangand C. S. Park, New 
Public-Key Crytosystem Using Braid Groups, Proc. of Crypto 2000, LNCS 
1880, Springer-Verlag (2000) 166 183, 

?^^-A-^ii:tt(}^Zsign(]iil, ^tsign(Ad)=d^byb-'a= (b''a ) ''yb^'a, ^ 




• 10- 
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sign(^0 ~ y^:^', ifhx' sign(M) =d'xa d'byb'^a= d'xbyb-'a, ^^x^LB^, 
beRBn.i-m> ^i^b=bx, M^xsign(M}=d'xad'byb-'a= d'xbyb-'a '^d' bx 
yb-'a-- (b-'a)'' (xy)(b''a). /kHrix sign(M) xy, 0J^b->^'^^^6^^^.t^4. 

m ^ ^ X ^^^vs.^ ^^i^iiE^ 

-^^Ttb eRB„.j-Ul), ^S:^^^ t\ ^m^^a^f^^^^^^b^^^>t'M 
i^^m']Sign(M) -'d'byb-'a^, .%M\^^^{»(J^SSign(M}Xi^^mS•^ > 

mAx' =d'xa, j-e.^x^x' ^muj^'i^^J^Ar-^n^^ ##^/t^(x', 

##2. ^S:^S^t^^^mH.tM^^^^^l^mm^]y=h(M) e Bjl); 
n.¥^^^b^'^Jt^M^J^m^\Sign(Ai) ='d'byb'a; 

fms.^S^iS.:^ V^i^^^^S!^i^mt.%M)^^^M^^S Sign(M) 

#^8> ^^me.^^^S{>^y^i-Y^sign(M}x' ^xy, ^n'^^^A^^^., 

>f?T>^-H-#*li^55L, t^TSL^^^$^' t^i^^ 
^.^$^$kn, I, d i^mi=3, d=4\ 4-B„(l ) = {b £BjO<mf(bJ, sup(b) < 

I }. M\Bn(l)\<(n!f^tM. nm.B„,(l ) = {b eLBJO<inf(b), sup(b) 
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</ } , RB^i.„,(l ) = {b ERBn.i.m\0<inf(b), sup(b)<l). ^^-^^^^ 

'-t 
1 1 



02 = 



1 / 
-t 
1 1 



as = 



1 / 

-/ 

1 1 



1 / 



-/ 



2. ^m^^RSSBG(x, djmP^ (x, x) ^^^a: 



12- 
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- 13- 
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It^: ^S:^ is), ^^ms.^ iV), t-^^^^'^'t (M), ^^Sl^^A- 

(5-) ik^^^^^^LBjl), X' €B„(l)> aeB„0)> 
(x', x)^9^^^yj is) t^^^, ^T^a^'^^^iT is) m^^\ 

fmis i^z^is) ^'^^^z 6^ >^ 4 ( M) ^ « ^mim^y=h(M) e 

B„(l)\ 

m!^l^7tb9^'M>% iM) ^ZmiSign(M) =a'byb-'a\ 

i^^4. ^Jk^ is) iM) ^:^A>^'4 iM) iih^:^Sign(M)^^. 

ffs^fm^^Z:^ is) i^^^^TzMix', x)A^m^7tai^^M^t.^^X 

fm. Ic. l^;bi.il#-4-^iO 6 M.'t^^BJS I); 
#Wld^ if^x'=b-'xb.a=b; 

#Wle, iSlpbli/'^— ^>b#, ^7*? 1, Mi\$-x =decycling(x),a=an,\ 
^:^^^\, i\%x=cycling(x), a=aT"(ni)\ 

fm\f^ ni^xA.^$,'^%.^sss(x)vx3^ i(x)<dA^^^SL, 
^^^f^ ix,x) a^^^^\ ^;r-^^^:2-, nmxi^m^. 



- 14- 
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^ff\^¥i h(M). 

Sign(M)^, ^^^^^ (5) ^j^^^; 

i*??^.^' (M) 

is) 



- 13- 
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!^z^{s)f^t^^^M^iM)^^'^n^Mi^ny=h(M) e 

n.¥^^^b^yH.t iM) ^Sm^\Sign(M) =a^byb-'a; 

f^As iS) iM) ^:^«4 iM) ¥j^J$,Sign(M)m^ii^ 

^J^m^:^ i V); 

5> ^J^^:^ i Vm^^^^ iS)^i^¥j^^^iM) VX^iH^' iM) 

Sign(M)^, m^^S:^ is) 
f^6s ^.]^^,M.^^?'Ji^lt/»^>-^'4 (M) i^mt#. miy=h(M); 

#m8. mt^^M^^^ is) ii(jy^i^^sign(M) x' ^ xy, #m 
Msign(A^J^i'H>t^ iM) 

;{i£^-f , ^/fii^^lt^^^ is) ^^^^^^ix'> x)^m0^^a^^^^ 

#^ Ic. b Mi't^^ B„ (5 1); 

f^ld. if^x'=b-'xb,a=b; 

f^le. Pl^ferti/'it— ^^1, m\%x' '=decycling(x),a=a7ri, 

i\%x=cycling(x), a= a t''( ttj); 
fmf> ^mx'A^M,i-^^SSS(x)^^^ i(x) <dA^-^^SL, 

ix,x')m^^^ a^A^m-, m-^^-^^* M^f-^m^, 

#4i£^-f . p}r^-^^2^^^^M^^hm^]y=h(M) 6 B„0)^mM.^i^^-^r 

• 16- 
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^ff^^^ h(M). 

11, 8 9 islio ff\'^^^^^n^¥.^^^^^:^$r^ 

12. ^M^^^ 8 ^>tii.6^^i^W.**c.6^li:^^^^*^^>^. * 
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r 
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b;if-^^RBn-l-m 




r 


it#byb-^ 




r 


it#sign(M)=a-ibyb"ia 




r 





@ 1 
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Ixb. 


a»b 








r 




r 


x' »decycHDg(x'), 
a* BTij 




x'-cycling(x') , 
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r 


l[log(2,nl)] 






iaRlilR2||...ilRl 




r 


i«0 
h(M) "e 




r 








h(M)«h(M)Ai 
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r 


S&A^*g (x,x') 




r 


ihemfl?li:51Jtty=h(m) 




r 




NI;Sy, sign(m) 




it^xy, X 


signOn) 




r 




xy, x' signdo) 




® 4 
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i = 


■0 




r 
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Pb( 

is-, 


i) 
ti) 

i^M 



Uaxinf (b) 



it W Minsup (a) ^ 
Minsup <b) 
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